Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
File:                     d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft (raw, json)
Hash identifier:          KGZPqYV2fDRpgzpR5k99q5svFC5PYx+7nrsfCS2wKbI=
Subject key identifier:   A4:BE:69:C4:4A:B3:F5:FA:29:65:3D:48:E6:67:99:A5:40:53:41:66
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Certificate issuer:       /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial:       0197BA7D45D4F6F96513E23CFF46B1E81077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
Manifest number:          10E5
Signing time:             Sun 29 Jun 2025 07:01:01 +0000
Manifest this update:     Sun 29 Jun 2025 07:01:01 +0000
Manifest next update:     Mon 30 Jun 2025 07:01:01 +0000
Files and hashes:         1: FVyOtMSkw-0Vg62ACMKcfYtFTZg.roa (hash: 19Vo/+e85FEDOozBk9ulyjhvlWCZUEMrSObfkurwei4=)
                          2: bGBL61Pb5C5jQn9lTt04zeAidWQ.roa (hash: tcI+1ZDPgb0dQJ/mWEWyrYgZXPfZZ/VnqvsqqlmCxEY=)
                          3: d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl (hash: S+1MkGLPTsKdINJfV0E8HMr3yebhJ/dED2/p5KFlqnQ=)
                          4: kfH4Hfcw2DAA4uCH3S-0NOLLLIE.roa (hash: +ssFltk6eznRSfe1ZkEA/pnveLfuNyk/DPp5U5STMlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7d:45:d4:f6:f9:65:13:e2:3c:ff:46:b1:e8:10:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
        Validity
            Not Before: Jun 29 07:01:01 2025 GMT
            Not After : Jun 30 07:01:01 2025 GMT
        Subject: CN=a4be69c44ab3f5fa29653d48e66799a540534166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:2a:da:5a:7d:6f:fa:a3:ad:37:22:1d:f0:
                    d2:fa:f4:91:7c:66:4d:75:b2:e6:19:3c:7d:7d:77:
                    2a:ef:29:18:6c:53:b6:a1:17:93:4d:00:74:2a:4f:
                    ed:7b:f5:33:48:ce:40:f6:6d:6e:a7:cd:61:13:40:
                    70:a4:b5:ff:6f:1b:27:20:06:3c:64:5a:f2:13:6c:
                    d1:e8:87:ef:0d:d4:ca:a8:7a:ee:f8:d9:f4:4b:d2:
                    e4:16:d4:99:2b:bf:b3:d0:ad:83:cf:01:fe:d6:60:
                    d9:3c:b3:f5:db:51:41:06:29:58:e4:03:34:69:11:
                    3b:1b:5f:be:d9:fe:c9:6e:1b:35:25:4b:19:1e:d2:
                    1e:b5:ac:9b:83:b5:5a:e2:ab:b5:3f:38:83:58:4b:
                    59:46:46:d1:09:49:e5:25:54:64:e1:2f:49:1c:80:
                    5c:ae:fc:1a:94:d3:97:3e:a9:21:75:b6:a1:c4:4c:
                    68:fe:df:26:55:9b:06:87:a5:0b:61:bd:2d:e4:16:
                    34:6b:1f:20:12:a0:f1:5e:a3:ad:07:19:44:f3:9a:
                    40:fe:36:d5:0a:17:cf:55:ac:8b:59:0d:55:b8:9e:
                    b7:9f:b5:34:60:79:b4:78:71:a2:b9:95:a8:51:d5:
                    39:c1:ee:81:92:75:d0:91:fd:27:eb:a3:76:d1:d9:
                    e8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BE:69:C4:4A:B3:F5:FA:29:65:3D:48:E6:67:99:A5:40:53:41:66
            X509v3 Authority Key Identifier:
                keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b2:17:14:80:71:39:f6:78:87:02:35:a1:71:16:9a:65:f4:
         55:4a:63:0d:0a:5c:d0:4d:29:0d:e3:17:25:29:38:da:3d:8a:
         77:f5:f5:d5:75:43:74:8b:73:d5:c0:46:b8:ee:c5:0c:e2:fa:
         b1:44:8a:99:cb:85:ec:3f:9a:96:02:d7:07:39:b7:df:17:54:
         1e:a1:65:70:57:5e:2e:9c:24:89:9e:92:f2:1f:d7:03:81:05:
         b0:c0:c3:f9:d8:1a:29:05:d8:ce:28:04:e5:32:01:57:20:70:
         b2:59:74:af:16:17:26:f2:75:53:48:6d:1f:d7:f8:81:73:62:
         15:a3:e8:e1:32:60:d5:7f:1a:0e:35:56:b4:5a:e6:cb:10:e5:
         3f:c7:da:29:b7:e8:25:2c:c7:2f:e1:78:aa:f6:0d:ae:2b:3a:
         35:8b:4a:26:79:fe:4e:89:75:da:08:ea:0a:ff:d3:6a:12:f2:
         10:07:a2:e5:62:9c:df:50:a0:42:e0:77:d8:de:61:c7:d1:f7:
         bc:10:bc:ff:7e:95:35:c5:a8:6b:78:3e:fe:b1:1c:81:3a:13:
         a9:b6:f4:a7:a7:da:7e:12:40:d7:4d:71:9d:ec:2c:fe:1b:99:
         3b:ba:49:28:31:b4:79:a8:5e:79:8d:a9:09:1a:41:47:b8:26:
         e6:e6:ef:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:21:09 2025 by rpki-client